System Preferences Priveleges - where are these?

I love priveleges in LANDesk Service Desk....

Having set up 2 core roles in our environment we have discovered one set has access to change System Preferences, the other does not.  For the life of me I can't see where to change the permissions so that neither group can change system preferences.  Any help would be greatly appreciated,

Thanks

David